CVE-2021-20149 is a critical vulnerability affecting Trendnet AC2600 TEW-827DRU version 2.08B01, where insufficient access controls on the WAN interface allow all services to be accessible via IPv6 by default, bypassing IPv4-specific iptables rules. With a CVSS score of 9.8, this network-exploitable flaw requires no privileges or user interaction and can lead to complete compromise of confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.08b01CPE matchmatch criteria | cpe:2.3:o:trendnet:tew-827dru_firmware:2.08b01:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Trendnet AC2600 TEW-827DRU Multiple Vulnerabilities
Dec 30, 2021Trendnet AC2600 TEW-827DRU Multiple Vulnerabilities
Dec 30, 2021Trendnet AC2600 TEW-827DRU Multiple Vulnerabilities
Dec 30, 2021